This message was deleted.
# papercups
s
This message was deleted.
r
Is it meant to avoid spoofing other customers? If so, are they verified at all?
a
it's mainly meant to be used as a unique id to make sure the same customer sees their conversation history whenever they are active on your website/app 🙂
✅ 1
but it's not too important, if you omit it it just means if they're on your website in a different browser or incognito, it won't load the previous conversation
r
Ah, that makes sense.
Is there a way to authenticate the information the front-end provides? It’d be great to have some sort of signing key so I can HMAC it server side and you can verify that yes, this person is in fact robert@observa.com and not someone who fiddled with the JS
cc @Kam Leung since they emailed me and I mentioned this chat in there